| CVE-2019-17005 |
The plain text serializer used a fixed-size array for the number of elements it could process; however it was…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17002 |
If upgrade-insecure-requests was specified in the Content Security Policy, and a link was dragged and dropped from…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-17000 |
An object tag with a data URI did not correctly inherit the document's Content Security Policy
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-11765 |
A compromised content process could send a message to the parent process that would cause the 'Click to Play' permission…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-11764 |
Mozilla developers and community members reported memory safety bugs present in Firefox 69 and Firefox ESR 68.1
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-11763 |
Failure to correctly handle null bytes when processing HTML entities resulted in Firefox incorrectly parsing these…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-11762 |
If two same-origin documents set document.domain differently to become cross-origin, it was possible for them to call…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-11761 |
By using a form with a data URI it was possible to gain access to the privileged JSONView object that had been cloned…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-11760 |
A fixed-size stack buffer could overflow in nrappkit when doing WebRTC signaling
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-11759 |
An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the stack
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-11758 |
Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total Security was…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-11757 |
When following the value's prototype chain, it was possible to retain a reference to a locale, delete it, and…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-11756 |
Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited to a denial of…
|
Not rated
|
Jan 8, 2020 |
| CVE-2019-11745 |
When encrypting with a block cipher, if a call to NSC_EncryptUpdate was made with data smaller than the block size, a…
|
Not rated
|
Jan 8, 2020 |
| CVE-2013-1689 |
Mozilla Firefox 20.0a1 and earlier allows remote attackers to cause a denial of service (crash), related to event…
|
Not rated
|
Dec 10, 2019 |
| CVE-2019-11754 |
When the pointer lock is enabled by a website though requestPointerLock(), no user notification is given
|
Not rated
|
Sep 27, 2019 |
| CVE-2019-11733 |
When a master password is set, it is required to be entered again before stored passwords can be accessed in the…
|
Not rated
|
Sep 27, 2019 |
| CVE-2019-11734 |
Mozilla developers and community members reported memory safety bugs present in Firefox 68
|
Not rated
|
Sep 27, 2019 |
| CVE-2019-11735 |
Mozilla developers and community members reported memory safety bugs present in Firefox 68 and Firefox ESR 68
|
Not rated
|
Sep 27, 2019 |
| CVE-2019-11736 |
The Mozilla Maintenance Service does not guard against files being hardlinked to another file in the updates…
|
Not rated
|
Sep 27, 2019 |
| CVE-2019-11737 |
If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path…
|
Not rated
|
Sep 27, 2019 |
| CVE-2019-11738 |
If a Content Security Policy (CSP) directive is defined that uses a hash-based source that takes the empty string as…
|
Not rated
|
Sep 27, 2019 |
| CVE-2019-11740 |
Mozilla developers and community members reported memory safety bugs present in Firefox 68, Firefox ESR 68, and…
|
Not rated
|
Sep 27, 2019 |
| CVE-2019-11741 |
A compromised sandboxed content process can perform a Universal Cross-site Scripting (UXSS) attack on content from any…
|
Not rated
|
Sep 27, 2019 |
| CVE-2019-11742 |
A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and…
|
Not rated
|
Sep 27, 2019 |